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Abstract 

An algebraic soft-decision decoder for Hermitian codes is presented. We apply Koetter and Vardy's soft-decision 

decoding framework, now well established for Reed-Solomon codes, to Hermitian codes. First we provide an 

algebraic foundation for soft-decision decoding. Then we present an interpolation algorithm finding the Q-polynomial 

that plays a key role in the decoding. With some simulation results, we compare performances of the algebraic soft- 

QO decision decoders for Hermitian codes and Reed-Solomon codes, favorable to the former. 
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I. Introduction 

Sudan and Guruswami's list decoding of Reed-Solomon codes HI, El has developed into algebraic soft-decision 
decoding by Koetter and Vardy |3]. As Reed-Solomon codes are widely used in coding applications, algebraic 
soft-decision decoding is regarded as one of the most important developments for Reed-Solomon codes. Hence 
c/3 there have been many subsequent works to make the decoding method efficient and practical H, Q, lH, Q, HI, 
^, |l9l. Engineers have proposed fast electronic circuits implementing the algebraic soft-decision decoder ifTOl . lITTll . 
||T2! . One may say that the algebraic soft-decision decoding of Reed-Solomon codes is now in a mature state for 
deployment in applications |13]. 

Reed-Solomon codes are the simplest algebraic geometry codes [14|. Therefore it is natural that the list decoding 

(^ of Reed-Solomon codes was soon extended to algebraic geometry codes by ShokroUahi and Wasserman |15| and 

"^ Guruswami and Sudan \2}. However, it seems that no algebraic geometry codes other than Reed-Solomon codes 

have been considered for algebraic soft-decision decoding. One reason for this unbalanced situation is presumably 

that the complexity of an algebraic soft-decision decoder for algebraic geometry codes would be prohibitively 

00 huge as the complexity for Reed-Solomon codes is already very large. However, algebraic geometry codes have 

O the advantage that they are longer than Reed-Solomon codes over the alphabet of the same size, promising better 

>• performance. We may also expect that once we have an explicit formulation of algebraic soft-decision decoding 

'k> for algebraic geometry codes, some clever ways to reduce the complexity to a practical level may be found, as has 

j_J happened for Reed-Solomon codes ||4j|. 



In this work, we present an algebraic soft-decision decoder for Hermitian codes. Hermitian codes are one of the 
best studied algebraic geometry codes, and they are often regarded as the first candidate among algebraic geometry 
codes that could compete with Reed-Solomon codes. To formulate an algebraic soft-decision decoder for Hermitian 
codes, we basically follow the path set out by Koetter and Vardy for Reed-Solomon codes. Thus there are three 
main steps of the decoding: the multiplicity assignment step, the interpolation step, and the root-finding step. For 
the multiplicity assignment step and the root-finding step, we may use algorithms in Q and lll61 . respectively. 
Here we focus on the interpolation step, the goal of which is to construct the Q-polynomial whose roots give the 
candidate codewords. As for mathematical contents, this work is an extension of our previous |17| and [18|. The 
core contribution of the present work is an algorithm constructing a set of generators of a certain module from 
which we extract the Q-polynomial using the Grobner conversion algorithm given in lITTl . 
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In Section 2, we review the definitions of basic concepts and the properties of Hermitian curves and codes. We 
refer to [ 19] and |[T4l for the basic theory of algebraic curves and algebraic geometry codes, and |20| and ||2TI 
for Grobner bases and commutative algebra. In Section 3, we formulate the algebraic soft-decision decoding of 
Hermitian codes. We present our interpolation algorithm in Section 4 and a complexity analysis of the decoding 
algorithm in Section 5. In Section 6, we provide some simulation results of the algebraic soft-decision decoder. As 
this work is an extension of fTT | , we omitted some proofs that can be found in that work but allowed some similar 
materials included here for exposition purposes. 

II. Preliminaries 

A. Hermitian curves 

Let q he a prime power, and let F denote a finite field with q^ elements. The Hermitian curve i? C A| is the 
affine plane curve defined by the absolutely irreducible polynomial V^ + Y — X'^+^ over F. The coordinate ring 
of H is the integral domain 

i2 = F[x,y]/(y« + y-x«+i) = ¥[x,y], 

with X and y denoting the residue classes of X and Y, respectively. Note that every element of R can be written 
uniquely as a polynomial of x and y with y-degree less than q, as we have y'^ + y — x'^+^ = 0. So i? is also a free 
module of rank q over ¥[x\. The function field K{H) is the quotient field of R. 

For each a G F, there are exactly q elements /3 G F such that Trp/p (/?) = /?'' + /3 = a'?+^. Therefore there 
are q^ rational points Pi,P2, . . . ,Pn oi H with n = q^, which can be grouped into q'^ classes of q points with 
the same x-coordinates. A rational point P of ff is associated with a maximal ideal mp = {/ G i? | f{P) = 0}, 
and the local ring Op oi H at P is the localization of R at mp. For a nonzero f ^ R, the valuation vp{f) is the 
largest integer r such that / G mp. 

The projective closure of ff is a smooth curve with a unique rational point Pqo at infinity. The functions x and 
y on H have poles at Pqo of orders q and q + 1, respectively, that is, vp^{x) = —q and vp^{y) = —q — 1. The 
genus of H is given hy g = q{q — l)/2. It is well known that the number of rational points of the curve H attains 
the maximum value possible for the genus and the size of the base field. 

B. Hermitian codes 

For u > 0, the F-linear space C{uPoo) = {/ G K{H) \ (/) + uPqo > 0} has a basis consisting of x^y^ for 
0<i, 0<j<q — 1, and qi + {q + l)j < u. Therefore 

oo 

R= \JC{uPoo)= F-xV. 

u=0 0<i 

0<j<q-l 

Recall that the Hamming space F" is an F-linear space with the Hamming distance function d. For 1 < i < n, 

let Pi = (oj, /3i). The evaluation map ev : i? ^ F" defined by 

ip^{ip{Pl),^{P2),...,ip{Pn)) 

is a linear map over F. We now fix a positive integer u. The Hermitian code Cu is defined to be the image of 
C{uPoo) by the evaluation map. li u < n, then ev is injective on C{uP^), and the dimension of Cu is equal to 
dim][r(£(uPoo))> which is, u + 1 — g iov u > 2g — 1 hy the Riemann-Roch theorem. Note also that the minimum 
distance of C„ is at least n — u. 
Define 

K = (^^ -x){y^ + y-^'}-Pi) ^ ^ 
{x-ai){y-Pi) 

for 1 <i <n. For a vector v = {v\,V2, ■ ■ ■ , Vn) G F", define 

n 

hv = y^^Vihj. 

i=l 

We can easily prove that hi{Pj) = 1 if j = i, and otherwise. Therefore ev(/i^) = v for all v G F". 



Example 1. Let q = 2 and F4 = {0, 1, a, a^}. We consider the Hermitian curve H defined by Y^ + Y + X^ over 
¥4. There are 8 rational points on H, 

(0, 0), (0, 1), (1, a), (1, a ), (a,a), (a, a ),(a ,a),{a ,a ). 

Let u = A. The linear space £(4Poo) i^ spanned by the basis {l,x,|/, x^}. Hermitian code C4 is a linear code 
over F4 of length 8 and dimension 4. We use the following generator matrix for encoding 



G 



Note that the positions 1,2,3,5 form an information set of G. Our message is (1, a^, 0, a), which is encoded into 
the codeword 

(l,a ,0,a)G = (l,a , 0, a, a, 0,0, a). 
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The functions hi are as follows: 

hi = {x^ + l)y + x^ + 1, 

/l2 = (x^ + l)y, 

hz = {x + X + x)y + a X + a x + a x, 
/i4 = (x^ + x^ + x)y + ax^ + ax^ + ax, 

q rt 0\ OQ O 

/i5 = (x + ax + a x)y + a x + x + ax, 

q O 0\ Q 00 

/i6 = (x + ax + a x)y + ax + a x + x, 

q 00 \ OQ O 

/ly = (x + a X + axjy + a x + ax + x, 
/i8 = (x^ + a^x^ + ax)y + ax^ + x^ + a^x. 

We will continue this example throughout. 

C. Local multiplicity of curves on a surface 

The smooth surface V = H x K^ has the coordinate ring A{V) = R® ¥[z\ = R[z\. The function field K{V) is 
the quotient field of ^(V^)- A rational point S* of F is a pair (Pi,^) with 1 < i < n and 7 G F, and is associated 
with a maximal ideal m^ = {/ G A{V) \ f{S) = 0}. The local ring Os of F at S" is the localization of A{V) at 
m^. A nonzero function / G A{V) defines a curve on the surface V. The multiplicity of / at a rational point S, 
denoted mult5(/), is the largest integer r such that / G m^. We note the following properties of multiplicity on 
the surface V. Let P be a rational point of H. 

(i) If f e R, then vp{f) = mult(p^^)(/) for every 7 G F. 

(ii) For f & R, mult(p,y)(z — /) = 1 if f{P) = 7, and otherwise, 
(iii) For /, 5 G A{V), multsifg) = mult5'(/) + m.ults{g) for every rational point S of V. 

III. Algebraic soft-decision decoding 

Suppose that some codeword of Cu was sent through a noisy channel. The output of the channel is some 
probabilistic information, for each location 1 < i < n, of the plausibility of each 7 G F. The multiplicity assignment 
step translates the information to a doubly indexed list 

M = [rrii^ I 1 < i < n, 7 G F] 

of nonnegative integers, where we regard nii^ as assigned to the point {Pi,j) €^ H x A^. The integer value rm^y 
would be chosen roughly proportional to the plausibility of the symbol 7 according to the channel output. We call 
M the multiplicity matrix. 
Corresponding to M, define 



'M 



{/ G R[z] I mult(p.^^)(/) > rriiy for 1 < i < n, 7 G F}, 



an ideal of R[z]. We call Im the interpolation ideal. Note that by definition 

Im= (1 m(p^_^). 
i<j<?i,7eF 

For a vector v = {vi,V2, ■ ■ ■ ,Vn) G F", the score of v with respect to M is defined as 



scoreM(w) = ^ 



mi. 



i=l 

Hence score Af(i') is also the sum of the multiplicities of the points through which the curve z — h^ passes. The 
task of the algebraic soft-decision decoder is to find the codeword that has the best score with respect to M. This 
codeword is presumed to be the most likely to have been sent, given the channel output. 

Example 2 (continued). Suppose that the codeword in the previous example is sent through a noisy channel and 
received data gives rise to the matrix of the plausibilities of symbols 

"0.604 0.001 0.171 0.001 0.567 0.949 0.997 0.486 

0.396 0.158 0.760 0.000 0.103 0.010 0.003 0.022 

0.000 0.005 0.013 0.985 0.279 0.041 0.000 0.470 

0.000 0.836 0.056 0.014 0.051 0.000 0.000 0.022 

which is then translated to the multiplicity matrix 

"30002452" 
20300000 
5 10 2' 
04000000 



M 



where the rows are indexed ^y 7 = 0, 1, a, a^ from top to bottom. Note that neither of the vectors (0, a^, 1, a, 0, 0, 0, 0) 
and (0, a^, 1, a, 0, 0, 0, a) that have the best score with respect to M is a codeword of C4. 

Lemma 1. Let M = [nii^] be the multiplicity matrix. Then 



d\m.¥R[z\/lM 
Proof: Since Im is a zero-dimensional ideal, 



V~~^ V~~^ / f^i'y ~\~ 1 



i=i ^eF 



dimp R[z\/Im = ^ ^dimp 0(^p^^^)/ImO(^p^^^) 
i=i 7eF 

n 

= ^^dimFC'(p^_^)//MO(P.,7), 

where O denotes the completion of the local ring. If t is a uniformizing parameter of Pi and s = z — 7, then 

©(P^^^) is isomorphic to F[[s,t]]. So (!)(p. ,j,)//mC'(p,,7) is isomorphic to F[[s, t]]/(s, t)™'''. The conclusion follows. 

D 

Lemma 2. Let fi & R with v = ev(;u). Then 

dimp R[z]/{Im + {z — ^)) = score(u). 
Proof: As in the previous proof, 

n 

(l\m.¥R[z\/{lM + {z- fJ-)) = y^ y^ dimp d^p^^)/{lM + {z - /t/))C'(p^_^). 

Let t be a uniformizing parameter of Pi and s = z — ^ again. We find that if ^(Pj) = 7, then 0(^p^^^-j/{Im + 
{z- fi))d(^P^^^) is isomorphic to F[[s, t]]/((s, t)™'^ + {s - tu)) = F[[t]]/(t™"^), but collapses to the zero ring 
otherwise. Here u is some unit in O^^p^^^y The conclusion follows. D 



For / = ipaz"' + • • • + il^iz + -00 G R[z] with tpi G R, the n-weighted degree of / is defined as 

deg„(/) = max {-vp^ii^i) + ui). 

0<i<a 

For / G R[z] and ip £ R, denote by f{ip) the element in R that is obtained by substituting z with ip in /. Observe 
that if If e £{uPoo), then —vp^{f{ip)) < deg„(/). The algebraic soft-decision decoding of Hermitian codes rests 
upon the following 

Proposition 3. Suppose f G Im is nonzero. If a codeword c = ev(;u) of Cu with n G £(nPoo) satisfies 

scoreM(c) > deg„(/), 

then f{fj,) = 0. 

Proof: Assume that /(//) is not zero in R. Then 

degM)>-vpAf{f^)) 

= dimf{R/f{fi)) 

= dimf{R[z]/ {f, z - fi)) 

> diraf{R[z]/{lM + {z — fJ-)) = score(c). 

For the first equality, see Lemma 5 in ifTTl . This implies that if scoreAf (c) > deg„(/), we must have /(/i) = 0. D 
In the interpolation step, the decoder picks a polynomial / G Im- Then by Proposition [3} all codewords whose 
score with respect to M is big enough can be obtained from the roots of / over R. Thus the decoder can find 
among the candidates the codeword that has the best score with respect to M. It should be noted that for the 
best performance of algebraic soft-decision decoding, it is crucial for the decoder to find a polynomial in Im with 
the smallest n-weighted degree. Having the same weighted degree, the one with smaller degree in z is preferred 
because this reduces the work of the root-finding step. Here the idea of Grobner bases is relevant. 
We call the elements in the set 

n = {x'y^z^ I < i, < i < g - 1, < /t} 

monomials of R[z\. Recall that every element of R[z\ can be written as a unique linear combination over F of 
monomials of R[z\. Note that 

dQg^{x'y^z^) =qi + {q + l)j + uk. 

For two monomials x^^y^^z^\ x^^y^^z^^ in $7, we declare 

x^^yi^z''^ >u x^^'y^^z^^ 

if deg^{x^^ y^^z^^) > deg^{x^^ y^^z^^) or ki > k2 when tied. It is easy to verify that >„ is a total order on Jl. 
Notions such as the leading term and the leading coefficient of / G R[z] are defined in the usual way. For / G R[z], 
the z-degree of /, written z-deg(/), is the degree of / as a polynomial in z over R. 

Now we define the Q-polynomial of Im as the unique, up to a constant multiple, element in Im with the smallest 
leading term with respect to >„. By the definition, the Q-polynomial is an element of Im with the smallest u- 
weighted degree, and moreover it has the smallest z-degree among such elements. Therefore we may say that the 
Q-polynomial is an optimal choice for the interpolation step. 

The last step of algebraic soft-decision decoding is to compute roots of the Q-polynomial over R or the function 
field K{H). Only those roots that belong to C{uPoo) yield candidate codewords. If the list of the candidate 
codewords is empty, the decoder may declare decoding failure or resort to hard-decision decoding directly from 
the channel output. If there are several codewords in the list, then the decoder chooses the codeword that has the 
best score, and outputs the received message by projecting the codeword on the information set. 

Example 3 (continued). The Q-polynomial of Im 

Q = z + {a X + axy + x + ay)z + {ax y + a x + x + xy + x + y + a x + \)z 

/26 7 25 26 24 25 2*^ 4 "^ 2\2 

+ [a X y + ax + a x y + a x + a x y + a x + a x y + x + x + axy + a x)z 

+ {x^y + a^x^ + ax^ + o?x^ + x® + ax'^y + x^ + ax^y + ax"^ + o?x^ + o?xy + ax^ + o?y)z 

+ o?x^^ + x^° + x^y + ax^ H h o?x^y + x^ + G?xy + y 



is obtained by the interpolation algorithm in the next section. It turns out the Q-polynomial has the factorization 

Q = (z + X +ay + xj(z + ax +ay + x + lj(z + {a x + axy + a x +ay + l)z 

+ {ax y + ax + ax y + ax + ay + ax)z + x + a x + x y + x + ax y + a x + axy + a y\. 

Therefore a root-finding algorithm will output two roots. The first root x^ + a^y + x gives the codeword 

c\ = (0, o? , 1, a, 0, Q? ^ 0, a^) 

whose score is 22 while the second root o?x^ + ay + x + 1 gives the codeword 

C2 = (1, Q , 0, a, a, 0, 0, a) 

whose score is 23. Therefore the decoder chooses C2, and the received message is 

(l,a^,0,a), 

which is the correct sent message. 

We will need upper bounds on the n-weighted degree and the z-degree of the Q-polynomial of Im- Let Q denote 
the Q-polynomial of 1m ■ 

Proposition 4. If A C 0, is a finite set of monomials of R[z] such that 

i^i>EE("'V' 

then there is a set of coefficients c^ G F such that ^ ^^p^A '^'P^ ^ ^M- 

Proof: Lemma [T] implies that monomials in A are linearly dependent over F in R[z\/Im- On the other hand, 

they are linearly independent over F in i?[z]. D 

In a table, we arrange monomials of R[z\ such that the monomials in the same column have the same n-weighted 

degree and the monomials in the same row have the same z-degree. Let weighted degrees increase from left to 

right and z-degrees from bottom to top. 

Example 4 (continued). Note that deg^{x^y^ z^) = 2i + 3j + 4k. So we have the following table 
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The symbol Q indicates that there is no monomial for the position. 

The table of monomials of R[z\ suggests the following formula. Let G{i) = if i is a Weierstrass gap at P^o, 
and 1 otherwise. Note that G{i) = 1 for i > 2g. The number of monomials with n-weighted degree i is 

\i/u\ 

C{i) = Y,G{i-uj). 
j=o 

Let w be the smallest integer such that 



N 



l + ^^f^^'^ + l) < 



i = l -yeF 



E^«- 



j=0 



Let / = [w/ul . Then the n-weighted degrees and the z-degrees of monomials up to the iVth monomial are not 
greater than w and /, respectively. Now Proposition |4] implies deg„(Q) < w and z-deg{Q) < I. 



Example 5 (continued). G(0) = 1, G{1) = 0, and G{i) = 1 for i > 2 since g = 1. So we have 
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For owr M, N = 76. Therefore w = 2?,, 1 = 5. Hence deg^{Q) < 23 and z-deg{Q) < 5. 

IV. An interpolation algorithm 
Let / be a positive integer such that z-deg{Q) < I. Define 

R[z]i = {/ G R[z] I z-deg{f) < I}. 

Note that R[z]i is a free module over R of rank / + 1 with a free basis 1, z, . 

Im,i = Im^R[z]i. 



. , z'. Define 



Clearly Im,i is a submodule of R[z]i over R. 

Recall that the ring R = ¥[x, y] is in turn a free module over ¥[x] of rank q, with a free basis {1, y, . . . , y'^~^}. So 
we may view R[z]i as a free module of rank q{l + 1) over F[x] with a free basis {y^ z^ | < i < ^, < j < g — 1}. 
The elements of O n R[z]i will be called monomials of R[z]i. It is clear that the total order >„ is precisely a 
monomial order on the free module R[z]i over ¥[x]. We also view Im,i as a submodule of the free module R[z]i 
over F[a:]. It is immediate that the Q-polynomial of Im is also the element of Im,i with the smallest leading term 
with respect to >„. As a consequence of the definition of Grobner bases, Q occurs as the smallest element in any 
Grobner basis of the module Im,i over ¥[x] with respect to >„. 



A. Generators of the module Im,i over R 
We begin with 

Proposition 5. Let M = [rriiy] be a doubly indexed list of nonnegative integers. For each i = 1,2, ... ,n, let 






max^gF nii^, and let N = [ni\. For each i with rii > 0, let 7j be such that m. 



*7i 



n. 



i-y 



nii^ for ^ ^ 'Ji and m'^. 



*7i 



m. 



'*7i 



where .Jjy 



1. Then as a module over R, 

Im = {z- h)lM' + Jn 
{/ G i? I vp.{f) > rij} and h £ R is such that h{Pi) = ji. 



i. Let M' = [m'^^] where 



Proof: By the properties (i), (ii), (iii) of local multiplicity, it is clear that (z — h)lM' + Jn C Im- To show the 
reverse inclusion, let / G Im- We can write f = {z — h)g + r for some g G R[z\ and r £ R. Let S = {Pi, 7j). If t 
is a uniformizing parameter of Pi, then t and z — ^i form a system of parameters of Os. Recall that the completion 
Os is isomorphic to the power series ring ¥[[z — 7j,t]]. Now if vp^r) = c, then in Os, 

f = {z- -fi)g + fu 

for some unit u in Os. Since f £ {z — 7i,t)"' and z — ji,t are algebraically independent over F, we see that 

c> Hi. Then as this is true for all 1 < i < n, it follows that r £ J^. Hence f — r = {z — h)g £ Im- Again by the 

properties of local multiplicity, g G Im' - Thus we showed the reverse inclusion. D 

Recall the multiplicity matrix M = [mj^]. Let ^max = maxj{^ gprrij^}. Initially let m^- = ?tt,,>, 



max-yg][r{mj-y}. Proceed inductively for s = 0, 1, ... , /max — 1- Choose 7^ such that m 
/iW G R such that /i^^H-P*) = H- Let 



is) 



i,j^ and n^ 



(0) 



n^/^ if ni""^ > 0. Let 



(s+l) 




if 7 = li, 

if 7 / li, 



n. 



(s+l) 



(s+l) 

max m-, 



Now let M(") = [m\^] and Af(") = [n\% Observe mi'""''^ 



47 



for all i, 7, and therefore / 



AfCmax) 



i?[z]. By 



induction, we get 

Corollary 6. for < Z, 

I 

lM,i = Y.Jm.^^ n (^-^^'^) 

s=0 0<r<s 

as a module over R. Here J^(s) = R and h^^' = Q for s > /max- 



B. Computing generators of the module Im,i over ¥[x] 

We may view the ideal Jat = {/ G i? | vp^{f) > Ui} as a module over F[a;]. Indeed Jj^ is a free module of 
rank q over F[x]. Thus we obtain 

Algorithm B. The input is an n x q^ matrix M = [rrii^] of nonnegative integers. The output is the generators 

{ds.t |0<s</,0<t<g — 1} of Im,i cls a module over ¥[x]. Repeat steps Bl and B2 for s = 0,1, . . . ,1. 

Bl. Let rii = max^gp rrii^ for 1 < i < n. Let L = {1 < i < n \ rii > 1}. For each i £ L, let ji &¥ be such that 



Ih'i lli'i'y.. tjdt 



9s 



,t^m n (^ - ^^ 



r)\ 



(2) 



0<r<s 



for < t < g — 1, where {rjQ,rii, . . . ,r/g_i} is a set of generators of J]y(=) = {f £ R \ vp^f) > rij} as a 
module over ¥[x\. When L is empty, Jn = R so r]t = y*. 
B2. Set 



and for 1 < i < n,7 G F, set 



m.-. 



m 



«7 
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1 ifl = li, 
otherwise. 



Notice that if we compute rn by the method in the following subsection, gs^t has leading term y^z^ with respect 
to lex order x < y < z. 

Example 6 (continued). We continue from Example^ We show the first few steps to compute a set of generators 
of Im,i with I = 5 using Algorithm B. Initially s = 0. Then 

ni = 3,n2 = 4, 71,3 = 3, 714 = 5, ns = 2, ng = 4, 727 = 5, ng = 2. 

As we compute in Example^ 

J^(o) = {x^^ + ax^"^ + a^x^^ + x^ + ax^ + a^x^, (x^° + x^ + x^ + x^)y + q?x^'^ + x^^ + • • • + x^) 

as a module over F[x]. So we set 

g^Q = x'^^ + ax^^ + a^x'^^ + x*^ + ax^ + a^x^, 

5,0 1 = (x^o + x^ + x^ + x^)y + Q^x^'^ + x^*^ H h x^. 

In step B2, we compute (setting 78 = arbitrarily) 

/i(o) = o/ii + a^/i2 + 1/13 + a/i4 + 0/15 + 0/i6 + Ohj + O/is 



axy + axy + ay. 



Now the matrix of rm^ is 



2 13 4 1 
20200000 
4 10 2 
03000000 



Going on to s = 1, we have 

rii = 2,n2 = 3, ns = 2, n4 = 4, n^ = 1, n-e = 3, nr 
Then 



4,n8 = 2. 



,14 



,13 



,2^12 



Jn(^) = (a; ■* + ax"""" + a^x""' + 
as a module over ¥\x\. Hence 



4 2 S 

+ Qx + a X , 



ax^^ + a^x^^ + a^x^^ + 



+ ax^ + a^x^) 



911 = {x + ax + a X + x + ax + a x )yz 



.,2^16 
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„2„4 



+ ax + a x'^)z + (ax" + qx" + ax + ax'^)y 



+ (ax^^ + a^x^^ + a^x^^ + 



+ ax + a X )z 
„9 I ^2^8 I ^7 



+ (x^^ + a^x^^ + x^^ + x^° + x^ + a^x^ + x^ + x"^)?/ 
+ a^x^^ + ax^^ + a^x*^ + ax^ 

Now h^^' = ax^y + ax'^y + a^x^ + ax^ + a^y + x anJ f/ie matrix of rrii^ is 

1 2 3 1' 

2 10 
3 10 1 
2 

Proceeding this way until s = b, we obtain a set of generators of the module Im,i- We arrange the coefficients 
(polynomials in x) of the generators in the following matrix 



xi« + • • • 











a^xi^ + • • 


xio + • • • 











q2x16 + . . 


xi4 + . . . 





0^x12 + . . 


x^5 + . . . 


ax^3 H 


x' + --- 


x^s + . . . 


q2x15 + . . 


a2xi3 + . . 


ax^^ H 


ax^'^ -\ 


xi4 + . . . 


Xl2 + . . . 


a2xi2 + . . . 


axi7 + • • • 


a^x'' + • • 


xi5 + . . . 


a2xi2 + . . . 


QX^S -\ 


ax^s _^ 


a2xi4 + . . 


a^xii + • • • 


QX20 + . . . 


a^xi^ + • • 


ax^^ H 


a^xis + . . . 


x^s + • • • 


ax^'^ H 


a^xis + . . 


ax^^ H 


x20 + . . . 


x20 + . . . 


axis + . . . 


axis + • • • 


x23 + . . . 


x^s + • • • 


ax^s H 


ax^s H 



















































































































x^ H 













ax 




1 








X3 + ... 


x3 


+ ax 


1 





x^ + ax"' 


ax^ + X 





1 



(3) 



where the rows are (/o,o. 5o,i. 51,0. 51,1. ■ ■ ■ . 95,0. 55,1 i>^ this order, and the columns are coefficients of 1, y, z, yz, 
z^, yz^, ... , z^, yz^ in this order. 



C. Computing generators of Jj\f 

We now tackle the task of computing a set of generators of J^ as a module over F[x]. For this, we switch to 
a different indexing of the rational points of H by grouping the q'^ rational points into q'^ classes with the same 
x-coordinates. Thus the rational points are P^t = (aa,/?^^) for 1 < a < g^ and 1 < b < q. Let Ha^b = ^i if Pa,b 
is the point Pj. Also assume that for each 1 < a < g^, we have arranged the index b such that Ha,b are put in 
decreasing order, 

Pa,l > Ma,2 > • • • > lla,q- 

With the new notations, 

Jtv = {/ G P I fp„.,(/) > fia,b for 1 < a < ^2 and 1 < 6 < q}. 
Proposition 7. For 1 < b < c < q, suppose that fb^c £ "^[x] satisfy 

VPc,,Ay - fb,c) > li-a,b - lJ'a,c 
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for all 1 < a < q'^. Define for c = 1,2, ... ,q, 

9c= Yl (x-aa^- n iy-fb,c)- (4) 

l<a<q^ l<b<c 

Then Jjv = {gi, g2, ■ ■ ■ , Qq) as a module over ¥[x]. 

Proof: Let 1 < c < g'. Then for 1 < a < g^ and 1 <h < q, 

^PaAdc) = l^a,cVp^_,{x -aa)+ ^ Vp^,{y - fh',c) 

l<b'<c 

> fJ'a,c + Vp^,{y - fh,c) > l^a,b- 

Therefore g^^ Jn- Recall that we may view i? as a free module of rank q over ¥[x\. Let J be the submodule of 
R generated by gi,g2, ... ,gq over ¥[x]. Then R/J is isomorphic to 

¥[x]/{ n (x-«ar'=). 

l<c<q l<a<q^ 

Therefore 

dimFi?/J= J2 dimFF[x]/( J] (x-aa)^-)= ^ ^ fia,c- 

l<c<q l<a<q^ l<c<q l<a<q^ 

On the other hand, as Jjv = Hp irip'''' by its definition, we have 

dimp R/Jn = X] dimp Op^Jm'pj'^ = ^ iJ.a,b- 

Pa,b l<a<q^,l<b<q 

Hence dimp R/J = dimp R/Jj^. Together with J C Jn, this implies that J = Jj^. D 

Example 7 (continued). We compute generators gi, 52 of Jf^m- We arrange the points as 

Pi,i = P2, Pi,2 = Pi, 

P2,l = P4, P2,2 = ^3) 
-Ps,! = -^6) ^3,2 = ^5, 



SO that Ha,b are in decreasing order, 



Pi,! — Pj, Pa,2 — Ps 



/"i,i = 4,^1,2 = 3, 

fJ'2,1 = 5,^2,2 = 3, 

/"3,1 =4,^3,2 = 2, 

;U4,1 = 5,^4,2 = 2. 



We will see in the next subsection that 



/i,2 = ax + ax + ax + x + a x + y + a x + 1 
satisfies 

^Pi,i(y-/i,2) > 1, 
^P2,i(y-/i,2) > 2, 
^P3,i(y-/i,2) > 2, 
^P4,i(y-/i,2) > 3. 

51 = (x - 0)^(x - l)5(x - a)^(x - q2)5 = x^s + Qx^^ + Q^x^^ + x^ + ax^ + a2x^ 
<72 = (a; - 0)3(x - l)\x - a)\x - a^)\y - /i,2) 
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+ a^x^° + a^x^ + o 
generates J^m as a module over F[x]. 



+ a^x^° + a^x^ + ax^ + a^x^ + ax^ + ax"^ + x^ 



D. Computing y — fh,c 

As y = x'^+^ — y", we see that y = X^^o(~^)*^^'^^^'''^' ^^ ^^^ completion of the local ring at (0, 0). On the other 
hand, if (a,/3) is a rational point of H, then xi-^x — a, yi— >y — a''(x — a) — /3 defines an automoiphism of H 
taking (a,/3) to (0,0). Hence at (a,/3), we have 



y = /? + a-'Cx - a) + V (-l)^(x - a) 



oo 

E( 

i=0 



Ug+ik' 



(5) 



Now we consider the following problem. Suppose that Qi = (qj,/3j), 1 < i < r are rational points on H with 
distinct aj. Given some positive integers fii for 1 < i < r. We want to construct y — f with / G F[x] such that 
^Qi {y ~ f) ^ fJ-i for 1 < i < r. There are at least two ways to do this. 

First method: For 1 < i < r, let Wi be the truncation of the series expansion ([5]l of y at {ai, (3i) modulo 

(x — a)'^\ and let Si,ti G F[x] be defined by 






a, 



and 



1 mod (x — ai)^' . 



Then y — "^l^i WiSiU satisfies the required conditions by the Chinese remainder theorem. 

Second method: A somewhat more explicit way is as follows. If /(x) = Yli=o ^i^^ ^ ^[x], then the condition 
vp{y — f) > fJ- is equivalent to the following linear conditions on the coefficients Oj, 



N-l 

E 

i=0 



for j = 0,1,...,^ — 1, where Cj = except cq = (3, ci = a'^, C(^q_^_l\g^ = (—1)* for i > 0. Now let A^ = 
^1 + /"2 + • • • + Mr- Then the required / can be determined by solving the linear system vA = C for the vector 
V = (ao, ai, a2, . . . , aAr_i) where C is a certain vector of length N and A is a square matrix of size A^ obtained 
by the horizontal join of A^ x /i^ matrices 



Ak 



a. 



0<i<N~lfl<j<tik-l 



for 1 < k < r. The matrix A is called a confluent Vandermonde matrix in the literature, and is known to be invertible 
(actually the determinant is J^^ (aj — Oj)'^'^^ ll22l . ||23l ). Therefore the linear system has a unique solution. 

Example 8 (continued). Let us compute /i 2 in the previous example by the second method. Here N = 1+2+2+3 = 
8. // h,2{x) = Ya^q aix\ then (ao, ai, . • • , a-j)A 



A 



aj)A 


= 


C where 








1 1 





1 





1 








1 


1 


a 


1 


2 
a 


1 





1 





2 

Q 





a 





1 


1 


1 


1 


a" 


1 


a 


a^ 


1 





a 





2 
a 








1 


1 


q2 


a 


a 


a2 





1 





1 





1 





a" 


1 


1 


a 


1 


a2 


1 


a 



and C = (1, a^, 1, a^, a^, a, a, 0). The solution of this linear system was given in the previous subsection. 
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E. Converting to a Grobner basis to pick up the Q-polynomial 

For this task, we use the Grobner conversion algorithm in fTT] that converts a set of generators of a submodule 
of F[3;]^ to a module Grobner basis with respect to a special weighted monomial order. We review the algorithm 
below. 

Let T = {(i, j) I < i < /, < j < g — 1}. Tuples in T are ordered lexicographically such that (0, 0) is the first 
tuple in T and the successor of (z,j) is (i, j + 1) if j < g — 1 or (z + 1,0) if j = (7 — 1. Thus {y^ z'^ \ {i,j) G T} 
is a basis for R[z]i as an F[x]-module and the weight of the basis element y-'z* is ui + {q + l)j. The index of 
/ G R[z]i is defined to be the largest tuple {i,j) such that the coefficient of y-'z* is nonzero. In particular, if the 
leading term of / G R[z]i is x^y^ z^ with respect to >„, then ind(lt(/)) = {k,j). Note that md{gij) = {i,j) for 
the generators gij of Im,i computed by Algorithm B. 

Algorithm I. The algorithm finds the element of Im,i with the smallest leading term. Initially set gij to be the 
initial set of generators of the module Im.i computed by Algorithm B. Let 



9i,j 



= E 

{i',j')er 
(ri,r2) and s 



^i,j,i',j'y Z 



during the execution of the algorithm. For r 

11. Setr^ (0,0). 

12. Set r to the successor of r. If r €z T, then proceed; otherwise go to step 16. 

13. Set s <— ind(lt((7r))- If s = r, then go to step 12. 

14. Set d <— deg{ar^s) — deg(as,s) and c ^ lc(ar_s)lc(as^s)~^. 

15. If d>0, then set 

If d < 0, then set, storing gs in a temporary variable, 



(si,S2) in T, we abbreviate a^y 



^ri,r2,Si,S2- 



Qs 



9ri 9r 



X gr 



cgs 



Go back to step 13. 
16. Output gij with the smallest leading term, and the algorithm terminates. 

Example 9 (continued). Algorithm I converts the initial basis given in ^ to a Grobner basis with respect to the 
order >„. The computed Grobner basis is 

G 









a'x" + a'x a" i 

1 

The twelve rows represent the polynomials in the Grobner basis of the module Im,i over ¥[x]. Comparing the weights 
of the leading coefficients of the polynomials, which lie on the diagonal, we find that the polynomial represented 
by the eleventh row is the required Q-polynomial of the ideal Im, given explicitly in Example |J] equation ([!]). 



ax^o + • • • 


a^x^ H 


ax + • • • 


x^ H 


xio + • • • 


ax^ + • • • 


ax^ ^ 


ax*^ + • • 


ax^° H 


ax^ H 


a^x^ + ■ ■ 


x^ + • • • 


x' + --- 


a'^x^ H 


x' + --- 


x^ + ■■■ 


x9 + • • • 


x7 + . . . 


x^ H 


x^ H 


x9 + • • • 


a'^x^ H 


ax + • • • 


ax^ + ■■ 


ax^ H 


ax^ + ax^ 


a^x^ + . . 


a^xS + . . 


x' + --- 


x^ + ■■■ 


a^x^ + . . 


a^x^ + . . 


a^x^ + ■■■ 


a2x7 + . . . 


x7 + --- 


ax^ + • • 


x9 + • • • 


ax^ H 


ax + • • • 


x^ + • • • 


ax^° H 


ax^ H 


X* H 


ax^ + ■■ 


a^x^i + • • 


• xio + • • • 


ax9 + • • • 


x^ H 


































































1 








X 











1 





c^ + a^x 


a2 


1 


a^x^ 


x^ + •• 






13 

V. Complexity Analysis 

Elements of R can be written uniquely as polynomials in y of degree less than q with coefficients in ¥[x\. We 
assume that for computations in R, we use this representation of elements of R. Also we think of deg^{f) and 
degj,(/) for / G i? in this representation. Note that a straightforward way of multiplying two elements f,goiR 
takes 0{q^ab) multiplications on F and that deg^{fg) <a + b + q + lifa = deg^.(/) and b = deg^{g). 



First we consider computing / G ¥[x] satisfying vp^{y — /) > /xj for 1 < i < r as in Section IV-D This 
computation takes 0{N^) multiplications on F where A^ = ^ui + /U2 + • • • + fj,r, if we use Gaussian elimination to 
solve the linear system. Note also deg^(/) < A^ — 1. 



Next we consider computing gc according to Proposition [7] in Section IV-C[ The first product vri on the right 



side of (|4]) has at most Iq'^ linear factors. Hence vri can be computed with 0{f'q'^) multiplications on F. Note 
deg^(7ri) < Iq^. On the other hand, as d.eg^{fiy^c) < Iq"^^ the second product 7r2 can be computed with 0{c'^l'^q^) 
multiplications on F. Note degj^(7r2) < c — 1 and deg3,(7r2) < (c — l)lq'^. Then vri and tt2 can be multiplied 
with 0{c^Pq'^) multiplications on F. Hence, in total, computing gc takes 0{c^Pq'^) multiplications on F. Note 
deg^igc) < clq^ and degy{gc) < c - 1. 



Now we consider computations in steps B2 and B3 of Algorithm B in Section IV-A Fix s. Computing r]t 
(= gt+i), as shown above, takes 0{{t + l)^/^g^) multiplications on F for each t = 0, 1, ... ,g — 1. Computing 
h^ "i can be done with 0{nq^) multiplications on F. Note deg^{h^'^') < q^ — 1. Let vr^''^ denote the product of 
the right side in (|2]). It is easy to verify deg^(7r('*)) = s and deg^.(7r('^)) < s{q^ — 1) + (s — l){q + 1) if s > 1. 
So computing gg^t = rif^ takes 0{s'^tlq^) multiplications on F. Note deg^{gs^t) < tll"^ + s{q'^ + q). Computing 
T^{s+i) = 7r(*)(z - /i^"*)) takes O^s^q*^) multiplications on F. 

Summing up, an execution of Algorithm B takes 

+ 0{sh') + 2 0{{t + lfl\') + X; 0{shlq')\ 
t=0 t=0 J 



I ( 

s=0 \ 


s— 


= 0(Z3g6) + 



q^)^0{l^q')-rO{sHi)) 
+ Oil^q'')+Oiiy) 

multiplications on F. Lastly noting deg^{gs,t) = 0{lq'^) and using a result in lITTl . we see that an execution of 
Algorithm I takes 0{l^q^^) multiplications on F. Therefore the algebraic soft-decision decoder of Hermitian codes 
can be implemented in a way that takes 0{l^q^^) = 0{l^'n?'^^''^) multiplications on F. 

VL Simulation results 

We implemented the algebraic soft-decision decoder (SDD) for Hermitian codes in software. In this section, 
we present some simulation results that show the performance of the algebraic soft-decision decode for half-rate 
Hermitian codes. 

First we describe the general setup of our simulations. We assume the AWGN channel. For QPSK and QAM 
modulations, the signal points correspond one-to-one with the symbols in the finite field over which the code is 
defined, and the posterior probabilities of the symbols are simply set to those of the corresponding signal points. For 
BPSK, each of the symbols correspond with a bit sequence, and the posterior probabilities of the symbols are set 
to the products of the posterior probabilities of the bits. Koetter and Vardy's multiplicity assignment algorithm f3l 
is used to translate the posterior probabilities to the values of the multiplicity matrix. The multiplicity assignment 
algorithm accepts a parameter L that limits the z-degree of the Q-polynomial, thereby the list size of the candidate 
codewords to at most L. From the multiplicity matrix, our interpolation algorithm finds the Q-polynomial. Then 
Wu and Siegel's root- finding algorithm [ 16| is used to compute the roots of the Q-polynomial. The list of candidate 
codewords is then formed from the roots. If the list is empty, then the decoder simply output the message part 
of the received vector determined by hard-decision directly from the posterior probabilities of the symbols. If the 
list is not empty, the decoder outputs the message from the codeword that has the best score with respect to the 
multiplicity matrix. 
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Fig. 1. Performance of algebraic SDD of [8,4] Hermitian code over F4 with QPSK modulation. 



A. [8,4] Hermitian code with QPSK 

The smallest field over which Hermitian codes are defined is F4 and the length of these codes is 8. The length 
is extremely small, and it is perhaps unrealistic to expect the codes to be used in practice. However the codes are 
amenable for simulations with somewhat larger L. Figure [T] show the performance of the half -rate [8,4] Hermitian 
code with QPSK. The example used in previous sections was sampled from this simulation with SNR 2 and L = 5. 

B. [64, 32] Hermitian code with BPSK 

Figures [2] and [3] show the performance of [64,32] Hermitian code with BPSK modulation. For comparison, the 
figures also show the performance of the half-rate [16,8] Reed-Solomon code. Observe that the performance curve 
of Hermitian code more steeply decrease than that of Reed-Solomon code, and from around 5 dB, the Hermitian 
code outperforms the Reed-Solomon code. 

C. [64, 32] Hermitian code with IQ-QAM 

Figures |4] and [5] also show that the Hermitian code outperforms the Reed-Solomon code with 16-QAM modulation, 
from around 8 dB onward. 



VH. Conclusion 

We presented an algebraic soft-decision decoder for Hermitian codes. Software simulations show that Hermitian 
codes perform better than Reed-Solomon codes for algebraic soft-decision decoding, as expected. However, for 
the decoder to be really practical, reduction of the computational complexity remains an important problem. One 
promising avenue is to generalize the idea of complexity reduction for Reed-Solomon codes in |,9j|. Designing 
efficient electric circuits implementing the decoder is of course an issue to explore. 

The extent of our computer simulations of the decoding algorithm was limited by our computing resources. It 
would be good to have analytic results about the performance of the decoding algorithm. There have been several 
analytic performance analyses for the algebraic soft-decision decoding of Reed-Solomon codes ||8l. Similar analyses 
may be done for Hermitian codes. 

Our description of the decoding algorithm is interwoven with the particular structure of Hermitian codes. However, 
the underlying principle of the decoding algorithm seems to apply to a wider class of algebraic geometry codes. 
In particular, plane algebraic curves with one point at infinity are immediate candidates. We leave an adequate 
treatment of this subject as a remaining work. 
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Fig. 2. Bit Error Performance of algebraic SDD of [64, 32] Hermitian code over Fig with BPSK modulation. 
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Fig. 3. Frame Error Performance of algebraic SDD of [64, 32] Hermitian code over Fig with BPSK modulation. 
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Fig. 4. Bit Error Performance of algebraic SDD of [64,32] Hermitian code with 16-QAM modulation. 
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